ASA500: migrate from Cisco VPN Client to native Windows VPN connection

We have a need at this time for only one of our computers to allow 2 Windows users to connect to our network thru VPN (it's a work share situation, they will not both be logged on the same day). We happily use the old Cisco VPN client for everyone else. But the old client will not install twice on the same machine, nor is there the option to "install for any user".
Thinking to KISS and not invest at this point, trying to get Windows native VPN to work ?
What combination of settings will work in its properties->security tab to do the same IKE IPsec over UDP(NAT) and with group auth along with the individual's login?
... (so no reconfiguration is needed in the ASA?)
Or are one of the other "type of VPN" will need minimal change on the ASA ?

Thank you.
I found this: http://www.cisco.com/c/en/us/td/docs/security/asa/asa72/configuration/guide/conf_gd/l2tp_ips.html#wp1041306
Will this have any effect on the rest of the users?
Step 1 Specify IPSec to use transport mode rather than tunnel mode with the mode keyword of the crypto ipsec transform-set command:
hostname(config)# crypto ipsec transform-set trans_name mode transport

Similar Messages

  • Migrating from Cisco Unity Express to Cisco Unity Connection

    Hello,
    We are going to migrate from Cisco Unity Express 8.6.6 to Cisco Unity Connection 9.1.2. Therefore, we need to migrate all mailboxes without data lost.
    So, the questions are next: is it possible? Which tools we should use and what  steps we need to pass?
    Thanks,

    Based on my experience of keeping the data (i.e. voicemails for users) it is really not worth it.
    Because all these voicemails will add up the Mailbox Space and user will get unnecessary "mailbox full" warnings even though they may be deleted (it takes around 2 weeks to get rid of the deleted voicemails)
    Hence, my recommendation would be to do a stare and compare for the most part and build all the Call Handlers etc, this will give you even better chance to get rid of all the unwanted stuff.
    HTH

  • RV320 and Shrew Soft vpn client - cannot get it to connect

    Hi,
    I have been trying to configure Shrew vpn client 2.2.2 to connect to the RV320 but i cant even get phase1 to work. I would be very grateful is someone has managed this and could post the configuration (tunnel, groupvpn or easyvpn). I use:
    RV320 with fw 1.1.1.19
    Windows 8.1 Pro x64
    Shrew Soft vpn-client 2.2.2

    Okay here you go please see attached images.
    Please note the following:
    In this example NAT Traversal is enabled if you're RV320 isn't setup behind another router i think you can disable it.
    Under "Local Group Setup" enter the IP Address and Subnet Mask of the LAN you're RV320 is part of.
    The preshared key you enter under IPSec setup is entered in Shrew in the "Authentication" --> "Credentials" tab.
    We use Extended Authetication (Xauth+PSK in Shrew Soft) you need to have a user + password setup under "User Management" tab on the RV320. Once you connect with Shrew Soft it will prompt for a username + password that is setup on the RV320 under the User Management Tab
    We're using "Mode Config" the IPSEC cliënt will be assigned a address from the Virtual IP Address range.
    In this example DNS nor WINS Server have been configured.

  • Cisco vpn client issue on windows 8.1 pro

    I am using Cisco RV325-k9 router, I am configure "Easy vpn" in this router.
    Our some users use Windows 7 pro and others users use Windows 8.1 pro with Cisco vpn client version 5.0.070290.
    Issue is VPN client connected but not access remote machine and ping on windows 8.1 pro machines. but Working fine on windows 7 pro.
    But When i am using wifi through MTS wifi usb device then working fine.
    Please find the attached screenshot of VPN Client Statistics.
    Please give me a solution.
    Regards
    Sanjib

    Hi Sanjib,
    Cisco VPN clinet is not supported for the windows version 8.1. And also it is EOL announced. Might be the below mentioned work around might help you. Try this.
    http://www.vmwareandme.com/2013/12/solved-windows-8-and-windows-81-cisco.html#.U9tCdxCrOxo
    Regards
    Karthik

  • Cisco VPN Client Blue Screen Windows Vista

    I am using Cisco Client IPSec VPN version 5.0.07.0410. Installed on a Windows Vista operating system. Blue screen in Windows occurs after I have entered userid and password. Can anyone shed any light on this? I know that Cisco operates fine with XP and Windows 7 but has had issues with Vista?
    Thank you
    Carlos                  

    Andrew,
                 Thank you. As soon as we upgraded Vista to SP2, it worked. The issue was with the OS not having the proper updates to interact with the Cisco VPN client.
    Appreciate all the support.
    Carlos

  • Multiple (but not all) VPN clients failing in Windows 8 and 8.1

    Big question for VPN gurus, with a long story.  I got a new machine with Windows 8 in late December 2012.  I work remotely
    for a bunch of different customers, so 100% of my work is done via VPNs.  My customers use a wide variety of VPN types.  These were all working fine up through early December 2013.  Suddenly a bunch of them stopped working.  I tried a ton
    of stuff:
    - Uninstalling all VPN clients and reinstalling them one at a time
    - Reinstalling / updating network drivers
    - Turning off and uninstalling antivirus and firewall software
    - Verified problem was on my machine, not local network, both by testing other machines on local network and by testing this machine on other networks
    The following VPN clients would not work:
    Cisco VPN Client
    FortiSSL
    Microsoft built-in
    The following VPN clients had no problems:
    Cisco AnyConnect
    ShrewSoft
    Juniper web-based SSL VPN
    Check Point web-based SSL VPN
    As you can imagine, having to use a second (Windows XP) machine to connect to half my customers was a source of some serious headaches.  After 3 weeks of beating my head against this, I finally upgraded my OS to Windows 8.1.  The hail mary worked;
    my VPN problems went away!
    Two weeks later, the exact same symptoms resurfaced.  I've gone back through a bunch of the steps that didn't help the first time around, with the same results.  I expect a system refresh would probably do the trick, probably temporarily like the
    OS upgrade, but I can't afford to spend a week reinstalling dozens of critical applications only to have the problem resurface after another couple of weeks.
    At this point, the closest thing I have to a clue is that in both cases the problems started soon after installing an update to the Cisco AnyConnect client.  After uninstalling the client, the problems do not go away.
    Exactly what do I mean when I say the VPN clients don't work?  That varies from one client to the next:
    Microsoft built-in: Error 720
    FortiSSL: variable - sometimes won't finish connecting, sometimes connects for about a second
    Cisco: variable - sometimes won't finish connecting, sometimes "connects" but I can't access anything
    Has anybody seen this sort of behavior before?  Any suggestions for fixes I may not have tried yet?  Thanks in advance.

    Hi.
    I have been similar issues with VPN clients. In my case cause of this problems seems to be "Deterministic Network Enhancer". So turning this component on and off usually helps.
    Actually I writed one script to fix this probleem for my clients.
    <#
    .Synopsis
       This script is ment for a fixing of network problems which may occur when you use Windows 8/8.1 with Client Hyper-V
    .DESCRIPTION
       This script will disable and then enable again Deterministic Network Enhancer (dni_dne) component from network connections.
       Parameter RegisterScheduledTask will register this script as a scheduled task which will be triggered at every  time when computer starts.
    .EXAMPLE
       Fix-Network.ps1
    .EXAMPLE
       Fix-Network.ps1 -RegisterScheduledTask
    #>
    param
        [switch]$RegisterScheduledTask
    function Test-IsRunAsAdministrator
       $currentUser = New-Object Security.Principal.WindowsPrincipal( [Security.Principal.WindowsIdentity]::GetCurrent())
       $currentUser.IsInRole( [Security.Principal.WindowsBuiltInRole]::Administrator)
    function Get-RunAsAdministrator
        if(!(Test-IsRunAsAdministrator))
            [string[]]$argumentList = @('-NoProfile' , '-File', $MyInvocation.ScriptName)
            if($RegisterScheduledTask)
                $argumentList += '-RegisterScheduledTask'
            Start-Process PowerShell.exe -Verb Runas -WorkingDirectory $PWD.Path -ArgumentList $argumentList
            break
    Get-RunAsAdministrator
    if($RegisterScheduledTask)
        $actionArgument = '-ExecutionPolicy Bypass -File  "' + $PSCommandPath + '"'
        $action = New-ScheduledTaskAction -Execute "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Argument $actionArgument
        $trigger  = New-ScheduledTaskTrigger -AtStartup
        $principal = New-ScheduledTaskPrincipal "SYSTEM" -LogonType ServiceAccount -RunLevel Highest
        Register-ScheduledTask -TaskName Fix-Network -Trigger $trigger -Action $action -description "Fix network for Windows 6.X with Hyper-V" -Principal $principal
    else
        $bindings = Get-NetAdapterBinding | Where-Object { ($_.ComponentID -eq "dni_dne") -and ($_.Enabled)}
        $bindings | Set-NetAdapterBinding -Enabled $false
        $bindings | Set-NetAdapterBinding -Enabled $true
        $date = Get-Date
        "Done:  $date" > $PSScriptRoot\Fix-Network.log
    Hope that this will help.
    Br,
    Heiki

  • VPN client will not open or connect

    Hi,
    I'm running VPN Client 5.0.07.0440 on a Windows 7 Pro HP TouchSmart. The .pcf file is the same iI am using on many other machines om this same network.  When I double click the icon, the window opens up, but when I double click the connection entry, the dialog box says "connecting to security gateway at xxx.xxx.xxx.xxx for a few seconds and then says "Not connected."  I can't even get to the log-in screen I normally can. This is a new computer set-up. All updates are downloaded for windows. 
    I've uninstalled the client and re-insatlled it re-booting after every step. I've pinged the address and had no problems. Running Avast, Malwarebytes as on other machines. No other security software. My VPN is enabled in my Network Connections. 
    Here is my log file:
    Cisco Systems VPN Client Version 5.0.07.0440
    Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
    Client Type(s): Windows, WinNT
    Running on: 6.1.7600 
    Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\
    1      13:05:53.644  07/05/14  Sev=Warning/3 IKE/0xE3000057
    The received HASH payload cannot be verified
    2      13:05:53.644  07/05/14  Sev=Warning/2 IKE/0xE300007E
    Hash verification failed... may be configured with invalid group password.
    3      13:05:53.644  07/05/14  Sev=Warning/2 IKE/0xE300009B
    Failed to authenticate peer (Navigator:915)
    4      13:05:53.645  07/05/14  Sev=Warning/2 IKE/0xE30000A7
    Unexpected SW error occurred while processing Aggressive Mode negotiator:(Navigator:2263)
    I know the names and passwords are correct as they were copied from working files.
    Hope this is posted to the right group.
    Never had this problem after many machines. Any help would be greatly appreciated. 
    Thank you

    Since you're getting the message "may be configured with invalid group password", perhaps your pcf file got corrupted. 
    I'd recommend you compare the profile pcf file (stored in "C:\Program Files (x86)\Cisco Systems\VPN Client\Profiles") on the non-working machine with one from a working setup.
    They can be examined in a text editor or with a diff tool (like the freeware ExamDiff). The encrypted group password hashes (string in the file preceded by "enc_GroupPwd=") should match.

  • Migrating from BE5k to CUCM 9.1 and Unity Connection 9.1 (not BE6k)

    Hello,
    We are starting to embark down the road of migrating from our BE5k system, to separated CUCM and Unity 9.1 systems on UCS Blades running ESXi.  I was wondering if there might be some documentation already existing on how we might accomplish this.  I have done upgrades in the past, and I'm sure there's a COP file or 3 that I need to install to make it all work properly.  I searched the Cisco site for such documents, but couldn't really find anything specific.
    We'll also be migrating our Cisco Presence from the old MCS platform to the UCS ESXi setup as well.
    Thanks for the help.
    Cheers,
    Mark

    Thanks George,
    That's the documentation for migrating to BE6k.  We are breaking away from the BE platform and doing full installs for CUCM and CUC.  Does the same article apply?
    I suspected that the Presence would be that simple, but just wanted to make sure.
    Thanks,
    Mark

  • 10.6 VPN client - 10.5.8 VPN server - Cant ping past server on l2tp or pptp

    Since installing 10.6 on my macbook and my mini, i can authenticate to MacPro 10.5.8 server over either l2tp or pptp. I cannot access any clients or ping any ip past the server on the local net.
    I can connect and ping from win machine at work and ping and connect to all machines on local net.
    Server vpn log shows authentification and connected with 10.6 machines. 10.5.8 machines work fine. Win machines work fine. Only 10.6 machines have issues.
    Any help would be appreciated

    After a complete rebuild of the sever, I have determined that the problem is related to setting client information. I rebuilt the server, added the vpn, and it worked with L2TP from 10.6 machines. I went back and added the client information exactly the way it worked with 10.5 machines and the vpn would fail. I have removed the information from the client information screen on the server, and it is workin fine with both 10.5 and 10.6 machines.

  • RV042 VPN Client Access not able to connect two users at same time

    I have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running WinXPPRo SP3. Any help is greatly appreciated.

    Were your QuickVPN clients behind a firewall router of some sort? For multiple QuickVPN clients to be able to connect to the remote RV042 at the same time, the local firewall router must have VPN Passthrough correctly implemented. You could try using a RV042 as the firewall router for your QuickVPN clients and you should be able to maintain 2 tunnels at the same time to the remote RV042.

  • Migration from  Sun to HP Unix to Windows

    Hi ,
    There is hardware and OS migration activity is scheduled in my current project. To give you the detail, BI system will be migrated from SUN to HP servers and OS will be changed from Unix to windows.
    I am asked to test the system to check that any existing functionality that works before migration should work after migration.
    I was suggested to have a look at the Installation guide to prepare the checklist. I know that the guides are available on service market place, however I am wondering which one I need to refer for the BI 7.0 installation.
    Can any one please send the link of Installation guide  specifically for  BI 7.0. ?
    If any one has done the similar kind of migration activity before then please share the pre and post migration test steps that you have performed during migration.
    Regards,
    Neeraj

    Thanks Effen,
    DB will remain ORACLE. I have just gone through the system copy guide . I found it bit confusing
    I have prepared a list of all necessary activities and check required pre and post migration. Appreciate if you just have a look at it. Add any check that you think should be added in the list.
    Pre Migration check:
    SAP R3 Side:
    u2022Take the snapshot of SM37 for all the LIS jobs whether it is in released state.
    u2022Need to flush all the delta queues from LBWE
    u2022Make the delta Queues Zero (By scheduling the respective info packages for the data targets).
    SAP BW:
    Analysis phase
    u2022Understand the BW landscape and identify all Interfaces (SAP and Non SAP).
    u2022Prepare a list of all outstanding issues of BAU. Also record all problems if any thing is broken and not working pre migration.
    u2022Prepare the test scripts for technical and functional testing.
    Migration Phase:
    u2022Run process chain to flush all the delta queues.
    u2022Remove all the jobs from Schedule position; identify all the chains based on event and Schedule chains.
    u2022Stop all chains, remove them from schedule.
    Post Migration check:
    SAP R3 Side:
    u2022Change the state of the jobs position from Schedule to Release and schedule the LBWE job to flush the records from LBWQ to RSA7 as per the one Hour frequency
    u2022Check the next released job time and makes sure that the LBWE job is started sending the records from LBWQ to RSA7.
    u2022Take the screen shots before sending the data from LBWQ to RSA7.
    u2022Check for the number records in RSA7 as well as LBWQ.
    u2022After the successful job run, check for the number of records in RSA7.
    u2022Make sure that the records in RSA7 are matching with the LBWQ.
    u2022Keep an eye on all the LIS jobs for two or three consequent runs.
    SAP BW Side:
    Technical Check:
    u2022Before going to start the process chains, check all the source system connections. This includes SAP and Non SAP source systems.
    u2022Check the connection of all SAP source systems with BW. Ensure that the RFC connection is established for all SAP source systems.
    u2022Check the connection of all Non SAP source systems with BW. Ensure that the DB connect setting is correct and connection is established. Need to check all the source system connections through DB to make sure that all the tables/Views are not dropped out after migration. If there is any table with inactive status need to bring to the notice of the admin people of that particular database.
    u2022Double check all the process chains based on Event and Schedule are successfully scheduled as per the existing timings.
    u2022While scheduling the jobs, there might be some chances that system will automatically postpone the loads by one day based on the job priority defined, ensure that the jobs are running as per the scheduled date and time.
    u2022Need to keep an eye on all the critical process chains like APO loads Etc... Mentioned in the excel sheet.
    u2022Keep on monitoring the process chains running also compare the execution time for performance check.
    u2022Randomly check the infocubes, update rules, Info objects  and other objects and verify that the objects are in active mode.
    u2022Ensure that all externally scheduled processes are rescheduled Backups, DB statistics, monitoring processes, etc
    u2022Verify that the connectivity with SAP portal.
    u2022For verifying the BI Java configuration, run the IP transaction RSPLAN, open BI admin cockpit and check that it is working fine after migration.
    u2022Verify the all infocubes administration activities like index creation/deletion, aggregate roll up, compression & DB ststistics refresh are working fine after migration.
    u2022Create/delete/ maintain BW objects: DSO, infocube, infosource, update rule, transformation, DTP etc in dev systems.
    u2022Check that Full Request InfoPackage, Repair Full Request InfoPackage, Initialisation with Data Request InfoPackage, Initialisation without Data Request InfoPackage and Delta Request InfoPackage can be executed successfully.
    u2022Check RSRV transactions for consistency.
    u2022Create, delete and modify the Query in query designer. Verify that the query designer works properly after migraition.
    Functional Check:
    Execute all functional test scripts and validate that the data is being loaded in all relevant info providers.

  • Hot to fix error 27850 when istalling vpn client x64 on windows 8.1?

    failed to installed vpn client x64 after upgraded my system to windows 8.1 enterp x64,
    how can i fix the problem ?

    need help

  • [SOLVED]Failure of the ZBF migration from cisco 2811 ios 12.4/K9 to 1941 ios 15/k9

    Hello to everyone,
    I write because I have decided to pass from a cisco 2811 with ios 12.4/k9 to a cisco 1941 ios 15/k9, migrating configuration I have a problem with the ZBF.
    I do not know if it's a problem of policy or differences between ios.
    Could someone help me please?
    Thank you all in advance
    Regards,
    Salvatore
    Update: Configuration modified and IOS upgrade.

    Salvatore,
    I don't know what problem exactly you face with your ZBF, but this may help you trbouleshooting your ZBF.
    http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a0080a63b94.shtml
    Thanks!

  • Migrating from Cisco Prime Unified Provisioning Manager 9.0 BE to Prime Collaboration 9.0 Provisioning

    Hi All,
        Cisco BE 6000 9.X support both Cisco Prime Unified Provisioning Manager 9.0 BE and Prime Collaboration 9.0 Provisioning as its management tool. OVA for both applications are pre-loaded on server from factory starting end of March 2013.
        For some customers that start with Cisco Prime Unified Provisioning Manager 9.0 BE, and want to migrate to Prime Collaboration 9.0 Provisioning for advanced features, they can follow the following guide for migration.
    http://www.cisco.com/en/US/partner/docs/net_mgmt/prime/unified_provisioning_manager/9.0BE/migration/guide/migrate_90be_pc90.html
        For more collaterals for Cisco Prime Collaboration, please visit
    http://www.cisco.com/en/US/partner/products/ps12363/index.html
    Best
    Jing

    Finally, the solution of the problem was:
    1-stop the daemon manager “net stop crmdmgtd” 
    2- Delete the xml files available under(please take backup from them) :
    CSCOpx\objects\sir\work
    CSCOpx\objects\topo\work
    3-Start the daemon manager  net start crmdmgtd  (wait for 20 minutes until all process are up )

  • Sent emails are missing from Thunderbird following migration from alternative email client and import of emails

    All sent emails are missing from the Thunderbird 'Sent' folder following import, but Sent folder still shows a count of the imported emails (Thunderbird considered them to be unread when importing them, hence the count). The messages are also visible online (BT Internet email) and on other devices (Android running BlueMail). Settings are set to place copies of sent items into Sent folder. Having imported all my old email, I can send email but again they do not appear in the Sent folder (but do appear online and on other devices). I have tried compacting the Sent folder and i have tried repairing the folder. All other folders (Inbox, other newly created folders) show the email i have imported.
    If I move an email online from the Sent folder to another test folder, it syncs and appears in Thunderbird in that test folder. If I then use Thunderbird to move the email back from that test folder to the Sent folder then Thunderbird will do so, but locks up for a good minute or so while doing that.
    Running TB 24.6.0 on Windows 8.1, incoming server set to IMAP on mail.btinternet.com (port 993), outgoing server set to SMTP on mail.btinternet.com (port 465).
    Help gratefully received!

    Cheers for that, Mulder.
    It did seem to recover some emails which had disappeared from Mail, but not all of them. That's the frustrating thing - short of going through my Yahoo webmail accounts and logging every single email, and then cross-referencing with what's on my desktop, I just can't be sure what's there and what's not!
    Sometimes it's immediately clear that something is awry - the folder I use for emails from my girlfriend is completely empty, for instance, when I definitely had things in there before the weekend. (Yes, again I went away for the weekend, with the computer still running - and Mail on - and again I returned to discover emails missing.
    Arrgh!

Maybe you are looking for